CVE-2025-22211

Summary

CVE-2025-22211 is a SQL injection vulnerability affecting the JoomShopping component versions 1.0.0-1.4.3 used in Joomla. This issue grants authenticated attackers, typically an administrator, the ability to execute arbitrary SQL commands within the country management area of the backend. Successful exploitation could lead to unauthorized data access, manipulation, or even complete system compromise. Users are advised to update to a patched version of JoomShopping to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.